Snort mailing list archives

Re: Snort 2.9, RHEL 5 and afpacket DAQ [~Solved?]


From: Rich Graves <rcgraves () gmail com>
Date: Thu, 21 Oct 2010 14:52:17 -0500

On Wed, Oct 20, 2010 at 5:06 PM, Michael Altizer <maltizer () sourcefire com>wrote:


I've attached an updated version of my previous patch which incorporates
item 1.


On my box, this fixes snort -c. Thanks.

However, snort -Tc still fails if (snort -c + snort -Tc) buffers are > 49MB.

Using snort --daq pcap -Tc to test config/rule changes is an acceptable
workaround for me, and probably better in most cases (unless you
specifically want to test buffer memory allocation). But it either needs to
be fixed or release-noted.

# snort -T -c /etc/snort/snort.conf
...
afpacket DAQ configured to passive.
Floating point exception
# echo $?
136
------------------------------------------------------------------------------
Nokia and AT&T present the 2010 Calling All Innovators-North America contest
Create new apps & games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: